XHunt founder DeFi Teddy said he recently came close to falling victim to a social engineering attack aimed at crypto industry participants. According to his account, the attacker first reached out on Telegram while posing as an institutional investment manager and shared a website, an X account, and an official email address to appear legitimate. The person then added him to a group chat that included supposed "CEO" and "BD" participants and used Calendly to schedule a Google Meet call. During the meeting, the other side asked about XHunt’s business model, valuation, and market expansion plans. About 10 minutes into the call, they claimed they could not connect to Google Meet and asked to switch platforms, sending a link to a so-called "kaokao" website. DeFi Teddy said he refused to open it, and later found that the URL was a phishing site. He warned crypto professionals to verify identities and past investment records before engaging with unfamiliar institutions, stay alert to unsolicited Telegram messages, and avoid clicking unknown links or downloading unfamiliar software or documents.
Techub News reported that DeFi Teddy, founder of Web3 social intelligence and KOL analytics tool XHunt, said he recently narrowly avoided a social engineering attack targeting crypto professionals.
The approach began on Telegram
According to his post, the attacker first contacted him on Telegram while posing as an institutional investment manager. The person also provided a website, an X account, and an official email address in an apparent effort to look credible.
DeFi Teddy said he was then added to a group chat that included people presented as a "CEO" and "BD," and a Google Meet call was scheduled through Calendly. During the meeting, the other side asked questions about the project’s business model, valuation, and market expansion.
A platform switch request came about 10 minutes into the call
Roughly 10 minutes later, the other side claimed they could not connect to Google Meet and asked to move the conversation to another platform. They then sent a link to a so-called "kaokao" website.
DeFi Teddy said he refused to open the link. After the meeting, he checked the domain and found that the URL was a phishing site.
Warning for crypto industry participants
He advised people in the industry to verify the identity of unfamiliar institutions and review their past investment projects before engaging. He also urged caution toward unsolicited Telegram messages and said people should avoid clicking unknown links or downloading unfamiliar software or documents.
The item cited Wu Blockchain.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
